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AMENDMENTS TO THE CLAIMS 

Please amend Claims 1, 5, 7, 8, 13, 17, 22, and 24 as indicated below. 

1. (Currently Amended) A method of transferring data over a computer 
network from a network server to a first client computer system, the method comprising: 

receiving a request by a requestor using a first client computer system for 
data from at least one network server storing data, at least some of the data 
stored by the network server being encrypted; 

verifying whether a public encryption key associated with the requestor is 

good; 

if verification fails, requesting user input from the reguestor and 
generating a public encryption key and a private encryption key based at least in 
part on the user input and based at least in part on an identification code 
associated with the first client computer system: 

checking an attribute of the requested data stored on the network server 
to determine whether the requested data stored on the network server is 
encrypted with aft -the public encryption ke y associated with the reguestor : 

if the attribute stored on the network server indicates that the reouested 
data stored on the network server is encrypted with the public encryption key 
associated with the reguestor , automatically sending the encrypted data to the 
first client computer system; 

if the attribute stored on the network server indicates that the reguested 
data is encrypted with a public encryption key that is different than the public 
encryption key associated with the requestor, automatically sending a message 
to the requestor indicating that the requested data is not encrypted with theif-the 
public encryption key of the reguestor w h e n the encryption key us e d to e ncrypt 
th e r e quested data is not assoc i ated w i th the r o qu o stor ; 

if the attribute stored on the network server indicates that the requested 
data is unencrypted, automatical l y r e tri e ving the e ncrypt i on k e y associat e d w i th 
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th e r e qu e stor from th e f i rst c l i e nt comput e r syst e m and; encrypting the requested 
data stored on the server w ith the public encryption key associated with the 
requestor automatically and without user intervention to create encrypted data; 
and 

sending the encrypted data to the first client computer system wherein the 
first client computer system automatically uses the private encryption key 
unique l y r e ta i ns a private k o y uniquely associated with th e cli e nt computer 
syst e m such that oth e r cli e nt syst e ms do not have acc e ss to th o privat e k e y and 
wh e r ei n both th e e ncrypt i on key and the privat e k e y ar e needed for d e crypt i on of 
to decrypt the encrypted data without user intervention . 

2.-4. (Canceled) 

5. (Currently Amended) A method of data storage and retrieval comprising: 
verifying whether a public encryption key associated with a requestor is 

good; 

if verification fails, reguesting user input and automatically generating 
independently of information from a network server a public encryption key and 
a corresponding private encryption key in a first client computer system based at 
least in part on the user input and based at least in part on an identification code 
associated with the first client computer system , wherein the network server 
stores at least some data in an encrypted format and wh e rein th e privat e 
e ncrypt i on key is uniqu el y associated with th e c lie nt computer ; 

storing the public encryption key and the corresponding private encryption 
key in the first client computer system such that access to the private encryption 
key is limited solely to the first client computer system and wherein both the 
public and the private encryption keys are needed to decrypt encrypted data; 

associating an attribute with a data file on the network server , the attribute 
indicating whether the data file is encrypted with the public encryption key 
associated with different reguestors w hen stored on the network server, and the 
attribute indicating an owner of the public encryption key; 
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requesting the data file by a requestor from the network server using the 
first client computer system; 

checking the attribute of the requested data file to determine whether the 
requested data file is encrypted with the public key of the requestor: 

if the attribute stored on the network server indicates that the requested 
data is encrypted with a public encryption key that is not associated with the 
requestor, sending a message to the requestor indicating that the requested data 
is not encrypted with their key wh e n th e encryption key used^ to e ncrypt the 
r e qu e st e d data is not associat e d with the r e qu e stor ; 

ch e cking the attribute of th e requ e sted data file to dot o rm i n e whether tho 
r e qu e st e d data file is e ncrypt e d; 

if the attribute stored on the network server indicates that the requested 
data file is encrypted with the r e qu e stor's public ke y associated with the 
requestor , forwarding the requested data file to the first client computer system; 
and 

if the attribute stored on the network server indicates that the requested 
data file is unencrypted, sending the public encryption key from the first client 
computer system to the network server automatically and without user 
intervention; 

forwarding the requested data file to the first client computer system after 
the public encryption key associated with the requestor is used to encrypt the 
requested data file to create an encrypted data file wherein the encrypted data 
file is forwarded to the requestor; and 

automatically decrypting without user intervention storing t he encrypted 
data file with the private encryption key on a storag e m e dium in the first client 
computer system. 

6. (Canceled) 
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7. (Currently Amended) The method of Claim 5, wherein at least one of the 
public encryption key and the corresponding private encryption key are based on a 
password entered by a user when logging on to the first client computer system. 

8. (Currently Amended) A computer readable data storage medium having 
stored thereon commands that are operative to cause a general purpose computer 
configured as a network server to perform a method of data retrieval comprising: 

verifying whether an encryption key associated with a requestor is good: 

if verification fails, requesting user input from the requestor and 
generating an encryption key based at least in part on the user input and based 
at least in part on an identification code associated with the first client computer 
system; 

receiving a request for a data file from a requestor using a first client 
computer system at a network server, wherein at least some data files are 
encrypted; 

checking a file attribute of the requested data file stored on the network 
server t o determine whether the requested data file is encrypted with afl-the 
encryption key associated with the requestor, wherein the attribute is alterable by 
a network administrator; 

if the file attribute stored on the network server indicates that the 
requested data file is encrypted with the encryption key associated with the 
requestor, routing the encrypted data file to the first client computer system; 

if the file attribute stored on the network server indicates that the 
requested data file is encrypted with an encryption key that is different than the 
encryption key associated with the requestor, sending a message to the 
requestor indicating that the requested data is not encrypted with th e ir k e y wh e n 
the encryption key us e d to encrypt th o r e qu e sted data is not associated with the 
requestor and; 

if the file attribute stored on the network server indicates that the 
requested data file is unencrypted, automatically requesting a — the public 
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encryption key associated with the requestor from the first client computer 
system , the public e ncryption key b e ing orig i nat e d ind e p e nd e nt l y of th e n e twork 
server and wh e r ei n th e cli e nt comput e r syst e m retains a privat e , d e cryption k e y 
that is uniqu e to th e cli e nt computer syst e m ; 

automatically encrypting the requested data file using the public 
encryption key associated with the requestor to create an encrypted data file; 
and 

routing the encrypted data file to the first client computer system such that 
oth e r client comput e r syst e ms do not hav e acc e ss to th e pr i vat e d e cryption k e y 
associat e d w i th the first client comput e r syst e m ; and 

automatically decrypting without user intervention the encrypted data file 
with the private encryption key associated with the requestor . 

9. (Canceled) 

10. (Canceled) 

1 1 . (Canceled) 

12. (Previously Presented) The method of Claim 1 , further comprising sending 
the requested data to the first client computer system only if the requested data is 
encrypted and if the requestor is the owner of the encryption key. 

13. (Currently Amended) The method of Claim 1, wherein t h e e ncryption key 
i s d e riv e d at le ast in part from an identification code is uniquely associated with 
hardware in the first client computer system . 

14. (Previously Presented) The method of Claim 13, wherein the encryption 
key is derived at least in part from user input. 

15. (Canceled) 

16. (Canceled) 

17. (Currently Amended) The method of Claim 5, further comprising sending 
the requested data file to the first client computer system if the requested data file is 
encrypted and the requestor is the owner of the public encryption key. 
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18. (Canceled) 

19. (Canceled) 

20. (Previously Presented) The data storage medium of Claim 8, further 
comprising sending the requested data file to the first client computer system if the 
requested data file is encrypted and the requestor is the owner of the encryption key. 

21. (Previously Presented) The computer readable data storage medium of 
Claim 8, wherein the encryption key is based at least partially on data associated with 
the first client computer system. 

22. (Currently Amended) The computer readable data storage medium of 
Claim 21, wherein the data associated with the first client computer system is uniquely 
associated with the first client computer system. 

23. (Previously Presented) The computer readable data storage medium of 
Claim 21, wherein the encryption key is also based on user input provided to the first 
client computer system. 

24. (Currently Amended) The method of Claim 843, wherein the identification 
code is uniquely associated with hardware in t he first client computer system. 
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